GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which stems from...

CVE-2022-47087

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c...

CVE-2022-47091

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...

CVE-2022-47654

GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to a Buffer Overflow in gf_hevc_read_sps_bs_internal (media_tools/av_parsers.c:8261). Affected product: GPAC MP4box; root cause is a memory corruption in HEVC SPS parsing. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, NO privileges re...

CVE-2022-47091

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...

CVE-2022-47089

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gfvvcreadspsbsinternal function of mediatools/avparsers.c...

CVE-2022-47663

GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is affected by a buffer overflow in h263dmx_process (filters/reframe_h263.c:609). Reported CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector and USER interaction required. Various security advisories (Debian DSA-5411-1, Gentoo GLSA 202408-21) advise up...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which originates...

CVE-2022-47091

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...

CVE-2022-47656

GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8273...

CVE-2022-47086: Out-of-bounds Write

GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gfsmloadinitswf at scenemanager/swfparse.c...

CVE-2022-47093: Use After Free

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...

CVE-2022-47091: Buffer Copy without Checking Size of Input

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...

CVE-2022-47088: Buffer Copy without Checking Size of Input

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...

CVE-2022-47657

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by CVE-2022-47657 due to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c:7662). The connected advisories indicate vendor-specific fixes: Debian's DSA-5411-1 patching to gpac 1.0.1+dfsg1-4+deb11u2, Gentoo GLSA-202408-21 reco...

CVE-2022-47086

GPAC MP4Box vulnerability CVE-2022-47086: a segmentation violation is triggered by gf_sm_load_init_swf in scene_manager/swf_parse.c affecting GPAC MP4Box v2.1-DEV-rev574-g9d5bb184. The issue is documented in multiple sources (NVD/NV D details) with CVSS 3.1 base score 5.5 (Medium) and a local att...

CVE-2022-47093

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...

CVE-2022-47088

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...

CVE-2022-47088

GPAC MP4Box 2.1-DEV-rev574-g9d5bb184b is vulnerable to a Buffer Overflow. The issue affects GPAC’s MP4Box component and is tracked as CVE-2022-47088 with a high impact (CONF/I/AV(H) = High) and local access required. Mitigation from Gentoo advisory GLSA-202408-21 recommends upgrading to GPAC 2.2....

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev593-g007bf61a0, which stems from...